Creating Client Certificate - Windows

Just configure the group policy to "Auto-Enrol" the user/machine certificates

http://technet.microsoft.com/en-us/library/cc787781%28WS.10%29.aspx


Okay so I Figured this out. For A CA Server using server 2008 you have to do it via the MMC snap in using your Current User Certificate and not the local computer. Took me awhile to figure that out. You also have to create an enroll agent certificate for yourself. What you do than is right click the personal folder, go to advanced operations and choose enroll on behalf of.

So:

  1. Open up mmc and do certificates for your user account.
  2. Enroll yourself as a Certificate request agent.
  3. right click the personal folder under the certificate
  4. Choose Advanced Operations and than Enroll on Behalf of
  5. Follow the wizard and the cert will be created

Thanks for all the help